Ukraine’s Cyberpolice warned on October 5 that callers posing as police officers are using a supposed relative’s detention to demand money. Their story can end with a bank transfer, a cash handoff to a courier or taxi driver, or a meeting with an accomplice. The immediate decision is the same in each version: end the call and contact the relative independently before paying.
The warning describes renewed activity in the familiar “relative in trouble” scheme, rather than announcing a newly discovered criminal group. It also identifies a second script in which the caller threatens the person answering the phone with criminal liability.
A frightening story becomes a payment instruction
The first script claims a relative is in custody after a traffic accident, a fight or another incident. Payment is presented as the way to avoid criminal consequences. That framing makes money seem like an urgent rescue, while the caller supplies both the emergency and the proposed solution.
The handoff need not involve an online payment page. Cyberpolice says the demand can move from an account transfer to a courier, a taxi driver or an in-person intermediary. For the recipient, the important point is that changing the delivery method does not verify the detention. Cash collection is still part of the caller’s unconfirmed story.
In the second script, the threatened person is the recipient. The caller may invoke purchases or other alleged conduct and demand payment or compliance to escape liability. The emotional pressure changes from protecting family to protecting oneself; the attempt to obtain hurried obedience stays the same.
Knowing a name is not proving an identity
A caller may supply a relative’s full name, an address or a police unit’s name. The agency warns that those details can be real or invented. Familiar information makes a story sound specific, but it does not establish who is speaking or whether any detention occurred.
This distinction explains why simply asking the caller for more details is a weak checkpoint. The person presenting the story also controls the answers. Ending that conversation and reaching the relative through a contact you already use moves the check outside the caller’s control.
A separate Mykolaiv fake-bank-call case shows a related authority tactic: callers framed a transfer as account protection. The October 5 warning concerns police impersonation and alleged criminal trouble; it does not link these calls to that investigated group.
Move verification outside the call
Cyberpolice’s advice is to stop the conversation, contact the relative or another family member yourself, and report a suspicious call to police on 102 in Ukraine when needed. An unanswered call to the relative leaves the claim unverified; it does not confirm the caller’s explanation.
Do not disclose card details, SMS codes or passwords. If money or banking information has already been handed over, the agency advises contacting the bank and Cyberpolice promptly, or calling police on 102 or 112. These are Ukrainian reporting numbers; readers elsewhere should use their local police and their bank’s established contact channel.
This warning is about manipulation over a phone call. It does not establish malware infection, voice cloning or a particular amount lost. The useful checkpoint comes before the payment: verify the emergency through a person or institution reached independently of the caller.
References
- Cyberpolice Department, National Police of Ukraine. Warning about police-impersonation calls demanding money to avoid criminal liability. October 5, 2026.
